semgrep/semgrep-rules

🔎 Static code analysis engine to find security issues in code.

OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security

An AI-powered security review GitHub Action using Claude to analyze code changes for security vulnerabilities.

A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings

Collection of agent skills to find vulnerabilities inside your web/mobile apps.

Detect and validate 500+ types of hardcoded secrets with advanced checks. Use it as a pre-commit hook, GitHub Action, or CLI for proactive secret detection and security.

Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.